Based on self-declaration
No technical audit.
European presence · For cybersecurity companies
ECSO Cybersecurity Made in Europe label for Portuguese companies
Show customers, partners and investors that your cybersecurity company is European and trustworthy. We assess eligibility, support the application and turn the label into visibility and commercial opportunities.
Free eligibility assessment · Exclusively focused on technology companies · Porto, Portugal
What it is
A European label for European cybersecurity companies
ECSO (European Cyber Security Organisation) is a European non-profit organisation and a partner of the European Commission in implementing public-private partnerships in cybersecurity.
ECSO created the Cybersecurity Made in Europe label so that cybersecurity companies with European origins and operations are recognised as such in the market. It does not certify a specific product: it distinguishes the company. It focuses on startups and SMEs, but larger companies can also apply.
Three key facts
Valid for 12 months
And it can be renewed.
ECSO does not accept applications directly
The label is issued by authorised issuing partners, and companies can choose any of them, regardless of the country where they are based.
Why it matters
Why the label matters for a Portuguese cybersecurity company
European buyers increasingly want to know where their data is, who controls the supplier and which rules it follows. The label answers these questions before they are asked.
| Benefit | What it means in practice | Who values it |
|---|---|---|
| Geographic differentiation | Stand out from non-European suppliers in a market dominated by large international brands | CEO, procurement |
| Trust and sovereignty | Signals European control, R&D and team in Europe, and GDPR compliance | Compliance, DPO, CISO |
| European visibility | Listed in the public register of labelled companies and present in the channels and events of ECSO and its issuing partners | Partners, investors |
| Credibility for startups | An external signal of trust when there are still few reference customers | First customers, investors |
| Sales argument | Concrete proof for proposals, presentations and campaigns, alongside NIS2 and GDPR | Sales team |
Geographic differentiation
- What it means in practice
- Stand out from non-European suppliers in a market dominated by large international brands
- Who values it
- CEO, procurement
Trust and sovereignty
- What it means in practice
- Signals European control, R&D and team in Europe, and GDPR compliance
- Who values it
- Compliance, DPO, CISO
European visibility
- What it means in practice
- Listed in the public register of labelled companies and present in the channels and events of ECSO and its issuing partners
- Who values it
- Partners, investors
Credibility for startups
- What it means in practice
- An external signal of trust when there are still few reference customers
- Who values it
- First customers, investors
Sales argument
- What it means in practice
- Concrete proof for proposals, presentations and campaigns, alongside NIS2 and GDPR
- Who values it
- Sales team
Eligibility
Is your company eligible?
The label is for cybersecurity companies that meet five criteria.
| Criterion | What is required | How it is demonstrated |
|---|---|---|
| Headquarters in Europe | Legal entity headquartered in Europe; if part of a group, the group's headquarters too | Company registration certificate, group structure |
| European control | No control or majority stake from outside Europe | Shareholder structure and main holdings |
| Main activity in Europe | More than 50% of cybersecurity R&D and staff in the EU, EFTA, EEA or United Kingdom | Company profile showing where the team and R&D are located |
| Trustworthy products and services | Compliance with ENISA's baseline security requirements for ICT products and services | Signed declaration of conformity |
| Data and privacy | GDPR compliance | Declaration of conformity |
Headquarters in Europe
- What is required
- Legal entity headquartered in Europe; if part of a group, the group's headquarters too
- How it is demonstrated
- Company registration certificate, group structure
European control
- What is required
- No control or majority stake from outside Europe
- How it is demonstrated
- Shareholder structure and main holdings
Main activity in Europe
- What is required
- More than 50% of cybersecurity R&D and staff in the EU, EFTA, EEA or United Kingdom
- How it is demonstrated
- Company profile showing where the team and R&D are located
Trustworthy products and services
- What is required
- Compliance with ENISA's baseline security requirements for ICT products and services
- How it is demonstrated
- Signed declaration of conformity
Data and privacy
- What is required
- GDPR compliance
- How it is demonstrated
- Declaration of conformity
In practice: most Portuguese cybersecurity startups and SMEs with European capital and teams meet the origin criteria. The point that needs the most preparation is the declaration of conformity with ENISA's requirements, which must reflect the company's reality.
Not sure? Take the free eligibility assessment →How it works
From assessment to label, in 5 steps
- 01
Eligibility assessment (free)
We review the company structure, where the team and R&D are located, and the situation regarding ENISA and GDPR. We tell you clearly whether the company is eligible and what is missing.
- 02
Choosing the issuing partner
As there is no issuing partner in Portugal, we help you choose the most suitable one among the partners authorised by ECSO.
- 03
Preparing the documentation
We organise the application form, the company profile (shareholder structure and European R&D), the ENISA declaration of conformity and the letter signed by the CEO.
- 04
Submission and follow-up
The company submits the application to the issuing partner, which checks eligibility and makes the decision. We follow the process and answer any requests for clarification.
- 05
Commercial activation
We bring the label into your website, LinkedIn, proposals and campaigns, with messages for each decision-maker, so it turns into trust and opportunities.
How FOCOB2B helps
More than a label: European visibility that creates opportunities
Getting the label is the first step. Its value lies in using it to win the trust of decision-makers. That is why our support covers both the application and the communication.
| ECSO Package | Enterprise Plan | |
|---|---|---|
| For | Companies that only want the label and its activation | Companies that want to scale or expand internationally |
| Eligibility assessment | Included (free) | Included (free) |
| Choosing the issuing partner | ✓ | ✓ |
| Documentation support for the application | ✓ | ✓ |
| Follow-up until the decision | ✓ | ✓ |
| Website and LinkedIn integration | ✓ | ✓ |
| Messages by decision-maker (CEO, CISO, compliance) | Core message | Matrix by market and segment |
| Campaigns featuring the label | — | Up to 3 channels, with email sequences |
| Entry strategy for a European market | — | 1 priority market |
| Price | Provided after the free assessment | Provided after the free assessment |
For
- ECSO Package
- Companies that only want the label and its activation
- Enterprise Plan
- Companies that want to scale or expand internationally
Eligibility assessment
- ECSO Package
- Included (free)
- Enterprise Plan
- Included (free)
Choosing the issuing partner
- ECSO Package
- ✓
Documentation support for the application
- ECSO Package
- ✓
Follow-up until the decision
- ECSO Package
- ✓
Website and LinkedIn integration
- ECSO Package
- ✓
Messages by decision-maker (CEO, CISO, compliance)
- ECSO Package
- Core message
- Enterprise Plan
- Matrix by market and segment
Campaigns featuring the label
- ECSO Package
- —
- Enterprise Plan
- Up to 3 channels, with email sequences
Entry strategy for a European market
- ECSO Package
- —
- Enterprise Plan
- 1 priority market
Price
- ECSO Package
- Provided after the free assessment
- Enterprise Plan
- Provided after the free assessment
The label fee is paid directly to the issuing partner and is not included in our fees. Each partner sets its own price. For reference, the European DIGITAL SME Alliance charges €600 + VAT for the label.
More information
Frequently asked questions
Find out whether your company can get the Cybersecurity Made in Europe label
In a free assessment, we review your company's eligibility and tell you what is missing to move forward. No commitment.
Check eligibility →FOCOB2B is not an ECSO issuing partner. We support the preparation of the application and the communication of the label.